BK Harness Privacy Policy (Amended June 25, 2021)

BK Electronics Co., Ltd. (hereinafter referred to as the “Company”) establishes and discloses this Privacy Policy in accordance with Article 30 of the Personal Information Protection Act to protect the personal information of data subjects and to address related grievances quickly and smoothly.

[Article 1] Purpose of Processing Personal Information

① The Company collects and processes personal information for the following purposes. Collected information will not be used for any purpose other than those stated below. If the purpose of use changes, necessary measures, such as obtaining separate consent in accordance with Article 18 of the Personal Information Protection Act, will be implemented.

② The specific purposes of processing personal information are as follows:

– Processing customer email inquiries / – Processing proposals from new partners/suppliers

[Article 2] Processing and Retention Period of Personal Information

Personal information will be retained until the processing of customer email inquiries, Cyber Ethics Hotline reports, and new partner proposals is completed. Records related to contracts, payments, and consumer disputes will be stored separately in accordance with relevant laws and regulations.

[Article 3] Provision of Personal Information to Third Parties

The Company processes personal information only within the scope specified in Article 1 (Purpose of Processing Personal Information). The Company provides personal information to third parties only under Article 17 of the Personal Information Protection Act, such as when the data subject consents or under special provisions of the law.

[Article 4] Outsourcing of Personal Information Processing

The Company may outsource personal information processing to external professional companies to improve services. In accordance with relevant laws, the outsourcing contracts stipulate necessary matters to ensure secure information management during outsourcing.

[Article 5] Rights and Obligations of Data Subjects and How to Exercise Them

① Data subjects (or legal representatives if under 14) may exercise their rights regarding personal information protection against the Company at any time:

– Request to inspect personal information / – Request correction of errors / – Request deletion / – Request suspension of processing

② Rights under Paragraph 1 can be exercised in writing, or via phone, email, or fax. The Company will take action without delay.

③ If a data subject requests the correction or deletion of errors in their personal information, the Company will not use or provide the personal information in question until the correction or deletion is completed.

④ The rights under Paragraph 1 may be exercised through a legal representative or an authorized agent of the data subject. In this case, a power of attorney in accordance with Form 11 of the Enforcement Regulations of the Personal Information Protection Act must be submitted.

⑤ Data subjects must not violate relevant laws, such as the Personal Information Protection Act, to infringe upon their own personal information and privacy or that of others being processed by the Company.

[Article 6] Installation, Operation, and Refusal of Automatic Personal Information Collection Devices

① The Company may use ‘cookies’ to store and retrieve user information through internet services. Cookies are small text files sent by the web server to your browser for storage.

② Information collected through cookies is limited to name, email address, and contact information. You can refuse to store cookies through your browser settings.

[Article 7] Personal Information Items Processed

The items of personal information collected and processed by the Company are as follows:

① For customer inquiries and partnership proposals:

– Company Name / – Name / – Contact Number / – Email Address

[Article 8] Destruction Procedure and Method of Personal Information

① The Company destroys personal information without delay when it becomes unnecessary, such as upon expiration of the retention period or achievement of the processing purpose.

② Electronic files are permanently deleted using low-level formatting, and paper documents are shredded or incinerated.

③ The procedures and methods for destroying personal information are as follows:

※ Destruction Procedure – The Company selects the personal information for which reasons for destruction have occurred and destroys it within 5 days upon obtaining approval from the Privacy Officer specified in Article 10 of this Privacy Policy.

[Article 9] Measures to Ensure the Safety of Personal Information

The Company takes the following security measures to ensure the safety of personal information:

① Administrative: Establishing internal management plans, regular staff training.

② Technical: Managing access rights, installing access control systems, encryption, installing security programs.

③ Physical: Restricting access to server rooms and data storage rooms.

[Article 10] Privacy Officer and Access Requests

① The Company has designated a Privacy Officer to oversee personal information processing and handle data subject complaints:

Department: Digital Marketing Team – Contact: Tel. +82-31-463-0303 / E-mail. hk3580@bkec.co.kr

② Data subjects may inquire with the Privacy Officer and the designated department regarding all privacy-related inquiries, complaint handling, and damage relief that occur while using the Company’s services (or business). The Company will respond to and process the data subject’s inquiries without delay.

Other Grievance Agencies

The organizations listed below are separate entities from the Company. If you are not satisfied with the Company’s internal handling of personal information complaints or damage relief results, or if you need more detailed assistance, please contact them.

– Key Responsibilities: Reporting personal information breaches, applying for consultation / Website: privacy.kisa.or.kr / Telephone: 118 (Without area code within Korea) / Address: 3rd Floor, Privacy Infringement Report Center, 9 Jinheung-gil, Naju-si, Jeollanam-do, 58324, Republic of Korea

– Personal Information Dispute Mediation Committee / Website: www.kopico.go.kr / Telephone: 1833-6972 / Address: 4th Floor, Government Complex-Seoul, 209 Sejong-daero, Jongno-gu, Seoul, 03171, Republic of Korea

– Supreme Prosecutors’ Office Cybercrime Investigation Division Telephone: 1301 (Without area code within Korea) Website: http://spo.go.kr / National Police Agency Cyber Bureau Telephone: 182 (Without area code within Korea) Website: http://cyberbureau.police.go.kr